Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/LcNSXGkRMAWjY_MmqNH4L1IVG38.roa
File: LcNSXGkRMAWjY_MmqNH4L1IVG38.roa (raw, json)
Hash identifier: Ua3XDkPviwryLy6nSZvXoj2w/0SvbM/CVytus0lD6hU=
Subject key identifier: 2D:C3:52:5C:69:11:30:05:A3:63:F3:26:A8:D1:F8:2F:52:15:1B:7F
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 018CC801086E724659B522F16388710B8C87
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/LcNSXGkRMAWjY_MmqNH4L1IVG38.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9063
IP address blocks: 185.38.76.0/22 maxlen: 22
2a01:4060::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:08:6e:72:46:59:b5:22:f1:63:88:71:0b:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc3525c69113005a363f326a8d1f82f52151b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:83:cc:13:7e:57:b6:00:ad:83:a4:d2:c4:
eb:d8:3b:9e:6a:a5:df:66:5f:da:c0:2b:58:c8:e6:
01:4b:6f:67:6e:c2:54:3a:0d:51:8e:97:38:9a:e9:
63:cd:7f:07:2e:69:30:a0:44:b5:f4:a7:30:62:ee:
ce:a5:fd:8a:b5:30:30:66:a0:82:d4:5a:40:3a:5d:
cc:59:c2:c6:1a:7c:c6:84:e1:1d:28:4e:4a:cc:09:
d6:a5:69:71:f5:d9:85:db:10:00:93:27:78:67:5a:
ad:92:b2:ac:cb:c1:52:6c:f9:32:17:39:6a:8a:9c:
e2:48:7b:9a:87:62:ee:2f:f6:74:48:7a:e5:45:f7:
7f:81:4c:30:80:16:9b:bd:da:53:e9:16:47:dc:77:
73:4a:ed:b0:e0:f9:9c:4c:72:12:6f:f1:98:f3:96:
0e:ef:c6:ea:89:6f:39:66:44:2c:a4:78:90:16:76:
f4:b8:ae:b3:76:42:e7:74:37:ca:81:21:36:81:e8:
fc:c0:ab:4d:c1:44:dd:c6:d8:64:36:73:dd:69:1a:
50:0c:13:b7:6e:58:a6:9d:82:21:50:9b:7c:8f:9a:
0c:79:ff:5e:14:a1:06:54:dd:4f:34:86:c8:6f:5b:
64:52:32:68:de:11:bd:1d:93:1c:8e:11:8d:3e:a2:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:52:5C:69:11:30:05:A3:63:F3:26:A8:D1:F8:2F:52:15:1B:7F
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/LcNSXGkRMAWjY_MmqNH4L1IVG38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.76.0/22
IPv6:
2a01:4060::/32
Signature Algorithm: sha256WithRSAEncryption
3e:f9:ce:bf:cd:6f:ee:2d:51:0b:19:25:0c:c9:98:84:0e:3e:
dc:e2:d3:09:83:03:c4:05:4c:1e:fc:eb:aa:54:71:26:29:2e:
68:a4:43:ec:6a:68:fe:93:2a:1a:ef:02:87:0d:e6:cd:3a:a5:
86:e0:bb:77:3c:15:de:52:66:8e:e4:ad:71:3a:28:79:26:b2:
57:0f:55:de:bb:e9:60:3a:23:7d:00:c5:d9:50:cb:26:46:71:
1c:67:61:27:fb:2c:81:2e:a9:81:3e:69:68:8f:5f:9b:85:59:
7b:b1:42:06:52:42:67:de:d7:4f:85:f8:0a:bf:62:7e:12:03:
b7:22:11:62:3c:d8:7e:67:0c:04:a1:ee:31:1e:c5:52:b0:9a:
81:29:1b:f4:26:a2:13:19:17:8d:dc:ef:82:61:68:86:40:e8:
9c:5d:57:f3:53:c4:84:5b:00:4b:3f:30:12:12:4b:86:48:a6:
4b:89:90:3d:a2:a5:75:ab:a7:e3:c3:44:02:87:3a:3a:b1:99:
3a:3d:55:40:6f:37:10:10:9d:64:5a:39:b3:af:6d:df:eb:3f:
6a:ff:eb:b5:c4:cc:1d:ca:28:bf:51:c3:dd:2c:09:b5:df:ba:
a7:15:c8:4c:06:32:60:b3:bc:1d:53:8f:c1:32:e5:0b:cb:46:
5d:e1:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:12:48 2024 by rpki-client on console-ams.rpki-client.org